Mail attribute for Slack

[Michael Brogan]

At the UW we've had a few Slack instances running with SSO and our IdP. Recently, for a new instance, we were told that the requirements have changed and that the IdP must release the mail attribute and that it must be asserted with a friendly name of "User.Email".

We already release the mail attribute with a friendly name of "mail" but Slack said that wouldn't work. When challenged about requiring new names for things that already have standard names, Slack said they would not change this requirement.

Have other campuses been told the same for recent Slack integrations? Any luck getting Slack to budge on this? Is there any hope for not being subject to the whims of every vendor that comes along?

Michael W. Brogan
Technical Lead, Identity and Access Management
UW-IT, University of Washington
206-685-7521

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180112/8e7d9f09/attachment.html>